compliance services
Let us help you qualify, obtain and comply
qualify, obtain and comply
Let us help you qualify, obtain and comply. Cyber insurance is a relatively new field in the insurance industry. Everybody wants it. Insurance companies want to provide the products. So, what is the problem? Why do companies develop and launch cyber insurance only to find little traction in landing sales to make the product viable? The answer is:
• To qualify
To qualify, all cyber policies stipulate specific requirements. Simply clicking yes without actual compliance is fraud. Real and actual compliance with stipulated requirements is only the first step.
• To obtain
Obtaining the correct insurance is the next obstacle. Only qualified and licenced persons are allowed to sell insurance, period. These policies are however not based on traditional insurance objectives such as death, loss, theft and so on. Traditional insurance is based on decades of experience from an insurance perspective. The insurer and agents are well versed in due diligence regarding traditional insurance policies.
Enter the dragon. Cybercrime. No such experience (hundreds of years) and understanding exists in the cybersecurity arena. This lack of experience inhibits bringing the product to market and landing clients. Conversely persons and companies seeking cyber insurance are unable to find the product they are seeking or more accurately need. It is a conundrum.
• To comply
Lastly, if the two parties eventually tie the knot the final challenge eventually sinks the hard fought for relationship: Compliance on the day of claim. We are dealing with cyber criminals, and should these fiends realize that insurance companies pay out claims willy nilly, they will strip the industry of billions. So no, insurance companies will never just pay out the claim. Both the insurer and client need security in claims. The client needs to be assured of payouts and the insurer needs assurance in legitimacy of claim.
Products offered by licensed insurers:
• Cyber liability
• Cyber extortion
• Loss of business income
• Digital media liability
• First party expenses
• Crisis management and notification expenses
We offer the services for you to
QUALIFY, OBTAIN AND COMPLY
We facilitate all the necessary cybersecurity requirements as stipulated by any given insurer through:
• Analysis of your cybersecurity environment
• Identifying specific cybersecurity measures as stipulated by the insurer
• Implementing the necessary requirements as stipulated by the insurer
We offer the services that you are insured for:
• We investigate and mitigate a cyber-extortion threat
• We facilitate security specialists, attorneys, forensic investigators, and loss adjustors to contain, manage and recover from an incident
• We facilitate experts to restore, re-collect or replace data lost, stolen or corrupted due to a system security incident
Interpol AFRICAN CYBERTHREAT ASSESSMENT REPORT
CYBERTHREAT TRENDS 2023
OF BEC ATTACKS IN AFRICA OCCUR IN SOUTH AFRICA
Per Year
of data breaches are linked to successful phishing attacks
average cost of a data breach
About Cyberlaw Forensics
Cyberlaw Forensics delivers cyber legal and forensic investigation services to the ICT sector and people in need of specialised services.
Gideon Petrus Bouwer
Gideon is the CEO of Cyberlaw Forensics (CLF). CLF drives technological innovation through expertise in information technology law and provide companies and individuals with the necessary legal advice and expertise to grow their enterprises in the field of artificial intelligence and communication technology. Gideon is an Attorney and Managing Partner of GP Bouwer Attorneys which is a specialised ICT law firm (gpbouwerattorneys.co.za).
He is a senior consultant at Steyn IP as a Specialist ICT law and AI law advisor. He holds a master’s degree in information technology law and is published on the Search and seizure of electronic evidence- JUTA (2014) SACJ 156. Gideon is referred to as authority on the search and seizure of electronic evidence in Juta - Commentary on the Criminal Procedure Act (Du Toit). He is currently pursuing his LLD (Doctorate in Law) on “The search and seizure of electronic evidence in a global context” at the University of Stellenbosch. This study includes the application of AI in light of the search and seizure of electronic evidence and cross-border data flows.
He has been investigating cybercrime for 24 years since the year 2000. He was a member of the SAPS for 24 years and has more than 30 years investigation experience. He is a regulatory expert in GDPR compliance, and global regulatory compliance with regards to transborder data flow and data protection regulations. Specifically, Gideon specializes in integrated IT compliancy solutions in the GRC space with regards to regulatory requirements. He combines IT and IT-law to achieve workable and implementable solutions.
He is published in ACAMS with regards to the integration of artificial intelligence in financial crime compliance, customer due diligence in context to the GDPR and the European cybersecurity ecosystem. Gideons’ specialty is inter alia POPIA and GDPR compliancy in relation to integrated IT solutions. Gideon has delivered advanced training courses and workshops to major banking institutions and corporate entities in relation to Popia and GDPR. These institutions include Standard Bank, FNB, Capitec, Westbank, Airports Company of South Africa (ACSA), African Rainbow Mineral and SASOL to name a few. Gideon specializes in integrated compliancy requirements such as the relationship between Customer due diligent (CDD), Popia and GDPR compliancy and has been published in the ACAMS European online magazine. Gideon has also been a speaker at various conferences on the integration of regulatory compliancy solutions such as, FICA, RICA POPIA and the GDPR and on how to find combined integrated solutions in context to ICT.
Gideon further specializes in the integration of ICT systems in relation to Governance, risk management, and compliance (GRC) which would include effective cybercrime security frameworks. Gideon has inter alia provided training to the forensics departments of Standard Bank, Capitec, FNB as well as African Rainbow Minerals and Sasol, on the development of cybersecurity frameworks and cybercrime.